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while, at the same time, reducing expenditures. The S-3A is 
a shipboard based anti-submarine warfare aircraft and was 
built by Lockheed Aircraft Corporation for the United States 
Navy. The S-3A entered service in the mid 1978's, well 
before the current refinements to the RCM program had been 
developed. As a consequence, its maintenance plan did not 
embody all of the changes that today's RCM program includes. 
A complete RCM analysis has never been performed on the S-3A 
aircraft because excessive amounts of resources would be 
required. This thesis shows where RCM can be selectively 


applied to the existing S-3A maintenance programs. 
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I: INTRODUCTION 


A. THE EVOLUTION OF MAINTENANCE TASK DEVELOPMENT 

Early on in aviation, maintenance programs were based on 
the concept that periodic overhauls would increase 
reliability. This philosophy of trying to make the 


equipment like "new" to ensure operational safety continued 
well past World War II. However, tests conducted by the 
airlines in the mid 1960s suggested a new concept in 
preventive maintenance; that less was better. 
Representitives of the airlines formed a maintenance 
steering group (MSG) to provide guidelines for reducing the 
amount of preventive maintenance. The results culminated 
with a handbook titled, "Maintenance Evaluation and Program 
Development" (Ref 1). Known as MSG-1, it was in this 
initial stage that decision logic and procedures were first 
introduced for establishing a conservative preventive 
maintenance program. Further development of this 
maintenance philosophy by the Air Transport Association in 
1970 lead to MSG-2 which provided a logical procedure for 
analyzing a piece of equipment in terms of its maintenance 
priority to the overall system. The final development, MSG- 
3, occurred when the Department of Defense contracted with 
United Airlines to have F. Stanley Nowlan and Howard F. Heap 


write a comprehensive report on what was to become known as 


Reliability Centered Maintenance (RCM). The results of this 
effort, στο σας the methodology for analyzing each 
maintenance requirement and objectively justifing a 
preferred maintenance task. This program was later 
incorporated in MIL-HDBK-266 (AS). 

This evolution of MSG philosophy has provided the 
analyst and engineer with a logical and detailed process by 
which to thoroughly analyze and evaluate a maintenance 


program and its associated maintenance tasks. 


B. OBJECTIVE 
The S-3A is a shipboard based anti-submarine warfare 

aircraft and was built by Lockheed Aircraft Corporation for 
the United States Navy. The S-3A entered service in the 
mid 1978's, well before the RCM concept was developed. 
Subsequently, the S-3A maintenance plan was developed 
utilizing MSG-2 philosophy and did not embody the changes 
that RCM brought about. A complete RCM analysis has never 
been performed on the S-3A aircraft nor is it recommended. 
Excessive amounts of resources would precluded such an 
undertaking. But by applying RCM selectively to existing S- 
3A maintenance programs, cost savings can and will be 
realized. The logic provided by the RCM program identifies 
only those preventive maintenance tasks which provide 
increased reliability while, at the same time, reducing 


expenditures. The objective of this thesis is to identify 
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how RCM analysis could benefit the S-3A maintenance program. 

It "m also hoped that this thesis will provide any 
person not familiar with the RCM philosophy with a thorough 
understanding of the terminology and analytical techniques 


associated with RCM. 


C. SCOPE 

The scope of this thesis will concentrate on the S-3A 
aircraft and will examine only those airframe aspects of the 
S-3A aircraft where RCM would be most beneficial to the S- 


3A's maintenance program. 


D. PREVIEW 

Chapter II considers the major events in the development 
of RCM from the initial inception of MSG-1l through MSG-3. 
Terms and concepts associated with Reliability Centered 
Maintenance are also discussed. Chapter III reviews the 
S-3A's maintenance plan based on MSG-2 philosophy. It shows 
how maintenance tasks were developed. Chapter IV considers 
the differences between MSG-2 and MSG-3 maintenance 
philosophies. It also establishes how RCM can enhance the 
S-3A maintenance program. Chapter V presents a summary, 


conclusions and recommendations. 
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II. HISTORY OF RELIABILITY CENTERED MAINTENANCE 


A. EARLY MAINTENANCE THEORY 

Early pioneers in aviation operated under the assumption 
that if a periodic scheduled maintenance program was 
established it would ensure reliability and operational 
safety. However, by the late 50's, actual data was 
contradicting many of the basic assumptions of traditional 
maintenance practice. 

Early maintenance theory was based on an intuitive 
belief that because mechanical parts wear out the 
reliability of the equipment is directly related to 
operating age (Ref. 2:p. 2). It followed that if one 
has the capability of making the equipment like "new" it 
would, in turn, ensure the original reliability. A 
problem still existed, however, in determining the 
interval of inspection and repair so that age limit criteria 
that was determined by engineering analysis would not be 
exceeded. It became more and more obvious that the concept 
of overhauling complicated equipment was of questionable 
benefit, both economically and from a safety and reliability 
standpoint (Ref 3: p. 19). Actual analysis of failure. 
data suggested that the overhaul policies were 


ineffective in controlling failure rates and that failure 


rates actually increased after  overhauls. 
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Our inability to predict failure rates can be partially 
explained. by analyzing Figure l. Also known as the "bathtub 
curve", it demonstrates how an aircraft that has undergone a 
complete overhaul could experience an initial increase in 
failures during the burn-in period. This trend can not be 
attributed to an insufficient inspection interval or 
overhauls that were not thoroughly performed. After this 
"burn in" period, the liklehood of failure remained fairly 
constant for most of an aircraft's useful life. It is near 
the end of this phase that we become concerned with 
determining when system wearout begins and the constant 


state ends. 


Failure Rate 1 


-2 {System System 
Burn In Wearout 





100 200 300 400 500 600 


Hours 


Figure l. Failure as a Function of Flight Hours 


If we concentrate on the flat part of the curve it is 
still possible to have high failure rates. Because of this, 
a task force consisting of representatives from the FAA, 
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airlines and aircraft manufacturers was formed to try and 
reduce d nian rates. The work of the group led to an 
FAA/industry reliability program, issued November 7, 1961. 
The introduction to that program stated: 


The development of this program is towards the control of 


reliability through an analysis of the factors that affect 
reliability and provide a system of actions to improve low 
reliability levels when they exist. . . . In the past, a 
great deal of emphasis has been placed on the control of 
overhaul periods to provide a satisfactory level of 
reliability. After careful study, the Committee is convinced 
that reliability and overhaul time control are not 
necessarily directly associated topics; therefore, these 


subjects are dealt with separately. 

This approach was a direct challenge to the traditional 
concept that the length of the interval between successive 
overhauls of an item was an important factor in its failure 
rate (Ref 2: p. 4). Up until this point, reliability was 
assumed if the aircraft was periodically overhauled. 


However, historical data proved otherwise. 


B. MSG-1 

Under the force of economic pressures to further 
reduce maintenance costs, while maintaining sufficiently 
high levels of reliability and safety, specialists wanted to 
define a generally applicable approach to the design of 
maintenance programs. In 1967, a joint effort, again 
between the FAA, airlines and aircraft manufacturers, 
lead to the formation of a maintenance steering group (MSG) 
which published a document titled Handbook: Maintenance 
Evaluation and Program Development (Ref 1). This 
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handbook, more commonly known as MSG-1, was used by special 
teams of industry and FAA personnel to develop the initial 
maintenance program for the Boeing 747. As described by the 
FAA, these teams* 
e > Sorted out the potential maintenance tasks and then 
evaluated them to determine which must be done for operating 
safety or essential hidden function protection. The 
remaining potential tasks were evaluated to determine 
whether they were economically useful. These procedures 
provide a systematic review of the aircraft design so that, 
in the absence of real experience, the best maintenance 
process can be utilized for each component and system. 

Further development of the decision logic and 
procedures resulted in the 1978 publication of MSG- 
2,Airline/Manufacture Maintenance Program Planning Document, 
(Ref 4). MSG-2 logic was used to develop the maintenance 
program for the Lockheed L-1811, Douglas DC-10, and was 
first applied to Naval aircraft in 1972 on the P-3A, S-3A 
and F-4J. The main thrust of MSG-2 was to increase both 
reliability and safety while, at the same time, reducing 
costs associated with maintainability. 

The Navy's version of MSG-2 was incorporated into a 
Naval Air System Command document, NAVAIR 99-25-4098 (Ref 5). 
As stated previously, this manual was the basis by which the 


Navy revised the preventitive maintenance requirements of 


the P-3A, S-3A and F-4J. However, as the predecessor to the 


*FAA Certification Procedures, May 19, 1972 Par. 3036 
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RCM (Reliability Centered Maintenance) analysis,  MSG-2 was 
utilized i develop prior-to-service programs such as the 
maintenance plan and phased maintenance programs. No 
attempt was made to incorporate historical data that could 


justify modification of the maintenance program after the 


aircraft became operational. 


D. MSG-3 

The Department of Defense contracted with United Air 
Lines, Inc. to write an extensive report on "Reliability 
Centered Maintenance" (RCM) in an attempt to find an 
approach which could incorporate actual maintenance history. 
Their report, (Ref 1) clarified the analysis process and 
provided greater detail in defining the scope and philosophy 
of the program. 

Further refinement of the RCM concept by commercial 
aviation personnel lead to the development of MSG-3 (Ref 6) 
in 1988 and improved the analysis procedures for the 
aircraft structures. MIL-HDBK-266 (Ref 8) applied the MSG-3 
philosophy to Naval aircraft in 1981 and has recently been 
superceded by MIL-STD-2173 (Ref 7) in January of 1986. The 
standard provides the principles of RCM and how it should be 
applied to all Naval aircraft, weapon systems, and support 
equipment. However, to date, not all Naval aircraft have 
had a thorough RCM analysis applied to their respective 


maintenance programs. The S-3A is included in this group. 
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E. 


PHILOSOPHY OF RCM 


Before discussing the goals of RCM, it is important to 


understand the philosophy that the authors of Reference 1 


presented in discussing the relationship between safety and 


scheduled maintenance. Their statements concerning this 


philosophy are summarized as follows (Ref 1: p.388): 


Failures are inevitable in complex equipment and can 
never be entirely prevented by scheduled maintenance. 


It is possible to design equipment so that very few of its 
failures or failure modes will be critical. 


Scheduled overhaul has little or no effect on the 
reliability of complex items. Rework tasks directed at 
specific failure modes can reduce the frequency of 
failures resulting from those failure modes, but the 
residual failure rate will still represent an 
unacceptable risk. Consequently scheduled rework 

is not effective protection against critical failures. 


The techniques of RCM analysis explicitly identify 
those scheduled tasks which are essential either to 
prevent critical failures or to protect against the 
possible consequences of a hidden failure. 


Scheduled maintenance tasks that do not relate to 
Critical failures have no impact on operating safety. 
They do have an impact on operating costs, and their 
effectiveness must therefore be evaluated entirely in 
economic terms. 


MIL-STD-2173 (AS) RCM PROCESS OVERVIEW 


As now defined by DOD, RCM is a disciplined logic or 


methodology used to identify preventive maintenance tasks to 


increase inherent reliability of equipment at least 


expenditure of resources. MIL-STD-2173 (Ref 7) provides the 


procedures by which the Navy can use in applying this 


philoshopy to Naval aircraft. The following excerpts from 
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MIL-STD-2173 are intended to provide the reader with a basic 
understanding of the RCM analysis program. The goal of RCM 
is to provide the following: 


a. Analyze the maintenance requirements for each 
type/model aircraft; 


b. Objectively justify every maintenance requirement; 


c. Enforce the performance of only the justified 
maintenance actions. 


Figure 2 (Ref 9, MOD 4/6) illustrates the process of 
reliability centered maintenance. Although each element of 
the RCM process will be discussed in greater detail, a 
general overview of the process is warranted. Initially, 
each system must be categorized as either significant or 
non-significant. Significant items then undergo the RCM 
decision analysis with preventive maintenance requirements 
being assigned to each justifiable task. Once these 
requirements are determined, Operating experience will 
either confirm or deny the maintenance task's effectiveness. 

If there was no past historical data from which to base 
the decision logic and task selection or if a problem is 
identified through actual fleet experience, age exploration 
provides a methodology to gain additional information in 
determining changes to maintenance requirements. The 
outcome of the RCM analysis is either the redesign of the 
component, an adjustment in existing maintenance intervals, 
the identification of preventive requirements to monitor the 


condition, or a complete elimination of the maintenance 
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Figure 2. RCM Process Overview 
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task. The ultimate goal is to provide a set of fully 


justified maintenance tasks without wasting vital resources. 


G. RCM ELEMENTS 

To better understand the details of the RCM process, 

Figure 3 (Ref 9, MOD 4/7) identifies the major elements. 

l. Significant Item Selection 

The RCM process starts with the determination of the 
design characteristics, functional breakdown, significant 
item selection and Failure Mode and Effects Analysis (FMEA). 
Before the analysis can begin, functional 
relationships between each item must be examined to determine 
the lowest level of item indenture. This relationship 
resembles a pyramid with the overall system at the apex. 
Figure 4 (Ref 7;pp 19) is an example of this structural 
breakdown by level of indenture. Functional breakdown is 
concerned with applying the RCM logic to the lowest level of 
indenture possible. Once this level is determined, an item 
must be classified as either significant or non-significant. 
There are two types of significant items, functionally 
significant items (FSI) and structurally significant items 
(SSI). A FSI is defined as an item whose loss of function 
would have significant consequences at the equipment level. A 
SSI is the specific region or element of structure whose 
failure would result in a major reduction in residual strength 


or loss of the structural function. 
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It is important to identify these significant items 
as early a8 possible in the acquisition cycle. Figure 5 (Ref 
7, p. 18) provides a decision logic to identify an item as a 
FSI, SSI or non-significant. 

2. EMEA 
The objective of failure mode and effects analysis 
is to identify functions, functional failures and 
engineering failure modes, and the effects of failure for 
each significant item. An example can best describe what 
these terms mean. A typical hydraulic pump will be used to 


illustrate. 


-Function: Provide hydraulic fluid at a fixed pressure 
and flow rate; 


-Functional Failure Mode: Fails to provide hydraulic 
pressure; 


-Engineering Failure Mode: Broken shaft; 


-Failure Effects: Loss of hydraulic pump function; 


21) Loss of hydraulic system; 
3.) Loss of flight control system and 
aircraft capability to safely fly. 
It is essential to the RCM analysis process that 
FMEA is properly performed since it is a primary input into 
the overall task development. MIL-STD-1629A (Ref 10) 
provides guidance for documenting the FMEA analysis as an 
input to the RCM process. 
3. RCM Analysis Decision Logic 
After the item is identified as either a FSI or SSI, 


RCM decision logic will determine what type of consequence 
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each failure could have upon the system and what task would 
be most BG rect ive in preventing the failure. It is important 
to note the difference between effects and consequences. 
Failure effects are the ways in which a malfunction is 
characterized. The consequence is the final outcome or 
result of the failure effect. Figure 6 (Ref 7:p. 22) is the 
decision logic diagram for determining failure consequences 
and selecting the most appropriate maintenance task for 
FSI's. There are four failure consequence catagories. 

a. Safety consequence; 

b. Economic/Operation consequences; 

c. Non-safety hidden failure consequences; 

d. Safety-Hidden failure consequences. 

After the failure consequences are identified, a 
preventive maintenance task analysis is conducted to 
determine that action which could best prevent the failure 
mode. There are five kinds of actions: 

a. Servicing and lubrication; 

b. On condition: Inspections of the aircraft at either the 
Organizational, intermediate or depot 
level to detect failures before they can 
cause a functional failure; 

c. Hard-time: Certain items are removed long before they 
are expected to fail and are either 
discarded or reworked; 

d. Combination: Used where an "on-condition" or  "hard- 

time" action alone proves not to be 


applicable or effective; 


e. Failure Finding: To find hidden failures when other PM 


actions are not applicable or effective. 
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Figure 7 (Ref 7:p. 23) illustrates the decision 
logic E SSI's. Because the failure of a structurally 
Significant item is always safety critical, a different 
logic is utilized in the decision process. This logic 
identifies requirements based on whether the design 
Characteristic is safe life or damage tolerant. 

In the safe life structural members there are two 
ways to achieve the required level of safety. One is by 
ensuring that the member has a large margin of strength over 
its expected load carrying requirement. The other is by 
limiting the actual time before removal to a value below the 
expected life that was determined under laboratory stress 
tests. 

The damage tolerant design requires that when one or 
more elements fail the rest of the structure must be able to 
carry the load. Furthermore, the rate at which a fatigue 
crack grows should be slow enough to allow time for its 
detection before a critical crack length is reached. 

4. Age Exploration 

Age Exploration is an intergral part of the RCM 
analysis process. It provides an effective means by which 
to further analyze those components having insufficient data 
from whieh to base a decision. Under most circumstances, 
the logic diagrams for the FSI and SSI selection provide a 
Clear path to follow. However, during the RCM analysis, 


some logic decisions have to be made without enough data to 
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Figure 7. Decision Diagram for SSI'S 
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substantuate the conclusion. When a "yes" or "no" answer 
can not be easily given, a default logic chart, Figure 8 
(Ref 7:p. 24), is used to clarify and provide guidance in 
selecting the proper course of action. Whenever default 
logic is utilized, the age exploration program described in 
NAVAIR 88-25-4083 (Ref 11) is useful for determining if an 
item should be classified as significant. 

Age exploration provides a methodology for 
gathering data that is needed to refine and revise initial 
maintenance tasks once an aircraft becomes operational. τε 
age exploration is not utilized effectively, excessive 
maintenance costs could mount from inspections that are not 
warranted. An age exploration program requires the 
following steps: 

a. Select candidates for AE by the RCM decision logic; 

b. Collection of required data from tasks; 

ο. Conduct data analysis and obtain results; 

d. Apply analysis results to PM task. 
Age exploration involves specifying the actual criterion to 
be evaluated and the intervals for the sampling inspection. 
Careful consideration must be given, however, to ensure 
that the potential benefits of age exploration outweigh the 


costs of performing such an investigation. 
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H. SUMMARY 

MSG-1 E originally developed so that the designer 
would be aware of the life cycle costs associated with 
maintenance and failure consequences. By being made aware of 
these downstream cost implications, the designer could make 
changes in the design characteristics in the early stages 
when changes are easiest and inexpensive. MSG-2 helped 
increase reliability and safety while reducing costs 
associated with maintainability. Both MSG-1 and MSG-2 
provided a realistic approach in determining the tradeoffs 
between the safety and economic impacts of design 
alternatives. 

MSG-3 provided the Reliability Centered Maintenance 
concept which further refined the approach of MSG-2 and 
added greatly improved analysis procedures. It also 
established guidance for determining those maintenance tasks 
that would realize the best improvement in reliability at 
least expenditure of resources. 

The next chapter will discuss the logic of MSG-2 and how 
it was applied to the S-3 aircraft in determining the 
maintenance requirements and inspection interval 


formulation. 


1 


III. 5-3 MAINTENANCE PROGRAM DEVELOPEMENT 


A. INTRODUCTION 

To establish the criteria by which the S-3A's 
maintenance program was developed, a discussion of the MSG-2 
logic and Analytical Maintenance Program follows. The 
purpose of this discussion will be to identify the 
differences between MSG-2 and MSG-3 philosophy and how the 


S-3A might benefit from the RCM program. 


B. ANALYTICAL MAINTENANCE PROGRAM (MSG-2) 

The Department of Defense contracted with United 
Airlines in 1972 to apply MSG-2 logic to all Naval aircraft 
including the S-3A aircraft. In 1978 the MSG-2 logic logic 
was incorporated into a Naval Air publication 00-25-4900 
entitled: Analytical Maintenance Program Guide for the 
Application of Reliability Centered Maintenance for Naval 
Aircraft (Ref 5). Along with MSG-2 philosophy, many other 
programs were incorporated into the Analytical Maintenance 
Program (AMP). These programs included: 

a. The Engineering Cognizance Program 


b. Analytical Maintenance Program Analysis Support (AMPAS) 
System 


c. Aeronautical Analytical Rework Program (AARP) 
d. S-3 Aircraft Advanced Maintenance Program 


e. Phased Maintenance Program 


32 


f. 


g. 


Hourly Engine Maintenance Program 


Maintenance Plan Program 


The Analytical Maintenance Program was established for 


essentially the same reason that persuaded the airline 


industry: to operate a piece of equipment with a 


certain probability of success at the lowest possible 


cost over the entire life cycle of operation. 


There were three phases to the AMP: Analysis, 


Implementation and Sustaining. The analysis phase applied 


the 


MSG-2 logic to each significant item and identified 


one of three maintenance categories that provided the best 


solution. They were hard time, on condition and 


condition monitoring tasks. A brief discussion of each 


category follows: 


a. 


Hard-Time (HT) Limit - This established a maximum 
interval for service life of a particular component due 
to the inability to ascertain degradation of 
reliability by on-aircraft inspection, testing or 
measurement. 


On-Condition (OC) - To determine the condition of a 
particular item, repetitive inspections or tests are 
performed to insure a valid "condition standard". 


Condition Monitoring (CM) - A maintenance process for 

items that have no high time limits or on condition 
maintenance tasks as their primary maintenance process. 
Condition monitoring relies on analysis of item 
performance records and involves no hands on scheduled 
maintenance. 


In the implementation phase, maintenance categories and 


requirements were established and culminated with the actual 


operating documents. The sustaining phase incorporated data 
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and analysis provided by the program to revise existing 
maintenance requirements. Only the analysis phase and the 
sustaining phase will be discussed to illustrate the MSG-2 


criteria under which the S-3 maintenance plan was developed. 


C. ANALYSIS PHASE 

The main objective of MSG-2 was to establish complete 
justification for all scheduled maintenance requirements 
(Ref Ὁς ο Τσο). An initial list of potential significant 
item candidates for analysis was developed by reviewing 
maintenance instruction manuals, work unit code  (WUC) 


manuals and aircraft system/components by functional 


hardware breakdown. MSG-2 identified two types of 
significant items. The first Was a maintenance 
significant item (MSI) which included all Systems, 


subsystems and components of the aircraft/equipment, but 
excluded fixed airframe structure and the basic 
aircraft powerplant. An MSI was the forerunner to the 
Functionally Significant Item (FSI) described in Chapter II. 
An MSI was an item judged by the analyst to be important 
from a failure consequence or failure frequency viewpoint 
which could possibly benefit from scheduled maintenance 
(Ref 5: Glossary p. 1). The second was a structurally 
significant item and was defined as an area of the 
primary structure which was judged by the analyst to be 
the most important from a fatigue or corrosion vulnerability 
standpoint (Ref 5: p.3-21). 
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Other problem areas having been identified through 
airframe εδ ης, technical directives and 3M data were 
also considered. 

Once all the review was completed, it was the 
analyst's decision as to which items were to be designiated 
as maintenance significant items (MSI) or structurally 
significant items (SSI). This was mostly a subjective 
evaluation with the analyst reviewing each system and 
component from a hardware standpoint and assessing its 
importance to the aircraft integrity. 

l. MPA-1 Worksheet (Significant Item Selection) 

Once the review of these two critical elements was 
complete, the candidate MSI's and SSI's were recorded on 
MPA-1 (maintenance plan analysis) worksheet in preparation 
for further analysis. Figure 9 (Ref 5:p. A-19) is an 
example of the MPA-1 worksheet. This is the starting point 
for subsequent analysis steps/worksheets which result in the 
final determination of actions required to alleviate 
potential failures for each MSI/SSI undergoing analysis. 
Each column of the worksheet was then annotated with the 
following information. 

a. WUC - The appropriate work unit code was entered here. 
The WUC identified, numerically, a specific 


malfunction. If none existed, TBE (to be 
established) was entered. 
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SIGNIFICANT ITEM LIST 


FFREPAHED Hv Hate HE VISION NO DATE APPLICATION 


J E Ervin 
Code 4120 1 Feb 1978 


ΠΠ PANT — 
4 
NOMENCLATURF ASL IRAE HS, j 


ARRESTING HOOK [1200302 101 
SUPPORT Lett Hand 


1200302 102 
Right Hand 


Figure 9. 


S 3A Anrcratt 


E &iSTING SCHEDULED MAINTENANCE 


REQUIREMENTS BRIEF: 


Zonal Inspection (08.03) 


Zonal Inspection (08.03, 22.09) 


Lubricate Pivot Point (08.03) 


Visual Inspection for Evidence 
oí Corrosion 108.03) 


MPA 1 sheet EL of IT 





PREPARING ACTIVITY 


NALC 412D 
INSP PROB 
FREO | SOURCE 
PH CFA 


(340! 


PH 
(680) 


DS 
(28) 


DS 
(561 


Delete 


Delete 


No action 


No action 


— — — ο — —, — —, — — LJ - ἆ -- -- — — — — — — — 


Measure Lug Bushing Inside 
Diameter for Wear 


Penetrant Inspection for Cracks 
in Lug Fillet Area 


Visual Inspection for Fastener 
Condition 
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DLM 
(20%) 


DLM 
(20716) 


ΡΗ 
(340) 





MPA-1 Worksheet 


Existing/Scheduled Maintenance Requirements - The 
existing requirements were usually obtained from one 
of the following publications: 


l. Periodic Maintenance Information Cards 

2. Turnaround Checklists 

3. Daily/Servicing/Special Maintenance Requirement Cards 
(MRC) 

4. Calendar MRC's 

5. Phased MRC's 

6. Depot Level Maintenance (DLM) Specifications 


Inspection Frequency - This interval between inspections 
was determined by engineers without any consideration 
of the economic consequences of failure. A code such 
as PREF for preflight, PF for postflight and D for 
daily were some of the codes utilized. 


Problem Source - Either CFA (Cognizant Field Authority) 
or ECA (Equipment Condition Analysis) was entered in 
this column. If the program was identified through 
data collected by one of the four ECA reports, ECA 
was selected. CFA was chosen if the cognizant 
field authority decided that a problem item, not 
previously identified through ECA, was a candidate 
for further analysis. 


Disposition - This category concerned the final outcome 
of the decision process. It could only be answered 
after the remaining worksheets which considered 
failure modes and effects analysis, scheduled 
maintenance requirements and performance of 
maintenance requirements, were complete. Five 
alternatives were available: 


l. "Retain" the required maintenance process; 

2. "Delete" or change the primary maintenance 
process from hard-time (HT) to condition monitoring 
(CM) or on-condition (OC) to (CM); 

3. "Add" a primary maintenance process such as (OC) or 
(HT) ; 

4. "Modify" the frequency of maintenance process but 
maintain the same category. Only the frequency in 
the (OC) task is changed or the criterion for 
removal of a (HT) item is altered; 

5. "Problem Item" is defined as an item where a hidden 
function exists and no valid/effective maintenance 
requirements are possible; or a failure would have 
a direct adverse effect on operational safety. 
Such a disposition would require a redesign to try 
to eliminate the hidden function by either visible 
access or additional warning instrumentation. 


37 


f. Reference - This column identified the data analysis 
worksheet that documented that type of disposition. 


2. MPA 2-1A (Structure Significant Item Analysis) 

For each SSI identified by the analyst, Figure 19 
(Ref 5:p. A-28) provided the necessary documentation for the 
Structural analysis. A rating system was applied by the 
analyst and engineer to obtain a numerical value for 
structural criticality. Figure 11 (Ref 5:p. A-22) was the 
analysis rating sheet that was utilized by the Naval Air 
Rework Facility Alameda, California in determining the 
Criticality of the SSI. 

After compiling the data, an overall criticality 
rating was determined by the analyst and represented the 
level of structural integrity of the SSI. In most cases, 
the fatigue or corrosion resistance rating or the lowest 
rating in any category determined the overall criticality 
rating (Ref 5 :pp.3-29). 

Depending on the criticality rating and the SSI's 
impact on safety, a structural examination or sampling plan 
was developed and proposed by the analyst. Figure 12 (Ref 
5 S A-21) is an example of the structural 
frequenct/sampling table that was applicable to the S-3. 
This table provided a basis from which to analyze initial 


estimates of sample size and frequency requirements. 
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STRUCTURAL SIGNIFICANT ITEM ANALYSIS MPA 2.1A 


NOMENCLATURE REV.NO./DATE WUC ZONE 04 03 PREPARED BY J. E. Ervin DATE 
ARRESTING HOOK SUPPORT TBE Ὅς Code 412D 1 Feb 1978 


APPLICATION PART NUMBER CORROSION 


: Left Hand 1200302-101 
— Right Hand 1200302-102 


RESISTANCE 4 


ENVIRONMENT (11 2 





OESIGN DESCRIPTION SURFACE TREATMENT (2) 3 


f A - 
a titanium forging (G6AL-6V-2SN) annealed comprised of; E i 
1) a lug for arresting hook attachment D rna : 
2) a flange for attaching and transmitting loads to the 578 buikhead (BHO) x -- 
3) a beam channel acting as the lower cap for the keelson STRESS OATA 
The 8HO and keelson attaching fasteners are HLT 318 and the skin 


fasteners are AD rivets. LH and RH installations are symmetric about Lug M.S. 2 0.39 
aircraft centerline. Attach M.S. = 0.52 
LR 24601 
2 
OPERATING HISTORY OR APPLICABLE DATA CRACKING 
No specific info. MEA refers to A-7 experience for arresting gear FATIGUE OATA 
components. 
31,500 hrs. - Math. Comp. 
LR 24614 
2 
3 
: 


REMARKS 
(1) For lug the environment is rated 2, for the beam area between FS 551 & 578 the rating is 3 
(2) Passivate + 306 prime + 310 paint. Skin attachment ts fay sealed. 





Figure 10. MPA 2-1A Worksheet 


S.3A AIRCRAFT 
SSi ANALYSIS RATING SHEET 






EXCELLENT 






CORROSION 


RELATIVE CORROSION SUSCEPTIBILITY OF MATERIAL 


SUSCEPTIA'LIT Yy 2000 & 7000 HIGH HEAT NICKEL 


ITEMS WORKING ENVIRONMENT 
ENVIRONMENT SEa SPRAY WEAH ABRASION 41 COND SEALEO FROM 


E XHAIUST SALT WATER VARIABLE ELEMENTS wil 
FrtREME TEMP A IMOSPHE RE TEMPE HATURE IPAME RSION 


ANTI CORROSION TREATMENT 





PLATE CHEM FILM ANODIZE + PRIME CHEM PAINT CAD - PRIME = 
* PRIME PASSIVATE FILM + PRIME * PAINT PAINT NICKEL PLATE 


SURFACF 
TREATMENT CHEM FILM 





SEALANT APPLICATION DURING ASSEMBLY 


ASSEMBLY DISSIMILAR UNSEALED DISSIMILAR SEALEO 
METAL UNSEALEO SIMILAR METAL METAL SEALEO SIMILAR METAL 


STRESS 





DESIGN MARGIN OF SAFETY 


ΠΠ | 










STRESS 


LEVEL GREATER THAN 


του 






CRACKING 






FATIGUE RESISTANCE IN TERMS OF ITEM FATIGUE LIFE (HOURS) 












FATIGUE 


AESISTANCE GREATER THAN 


75 000 


Figure ll. S-3A Aircraft SSI Analysis Rating Sheet 
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S3A AIRCRAFT 
STRUCTURAL SAMPLING TABLE 


FLEET (0/1) DEPOT 
OVERALL CRACKING OR IMPACTS 
CORROSION RATING OP, SAFETY 
CORROSION CRACKING CORROSION CRACKING 
1 56 DAY TURNAROUND 100% 


DLM 

2 eee oaa DAY I S 20% 
DLM 

3 56 DAY 340 HR (204) 20% 
DLM 2 , 

3 NO 112 DAY 680 HR (2020) 10% 
OLM 2 

& 112 DAY 340 HR 20°.) 10% 
DLM 2 

4 — DAY — ῃ HR Eo ) 10:0 





Figure 12. S-3A Aircraft Structural Sampling Table 
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3. MPA 2-1 Worksheet (Failure Modes and Effects Analysis) 

After MSI/SSI selection was complete, failure mode 
and effects analysis (FEMA) for each item was performed by 
completing the MPA 2-1 worksheet, Figure 13 (Ref 5: pp.A- 
23,24). Failure modes are the specific ways in which an 
item can fail and were broken down into two types: 
Functional and engineering failure modes. A funtional 
failure was defined as the inability of an item to 
perform its normal or characteristic actions within 
specified limits. An engineering failure is an actual 
physical deviation from the design limit (Ref 13:p.5). 
Identifying each engineering failure mode that could 
apply to given functional failure is quite important in 
the analysis process. 

The intent of this worksheet was to ensure that only 
realistic failure modes are analyzed. The analyst could then 
be fairly confident that a maintenance task was not going to 


be assigned to a failure mode that would never occur. 


4. MPA 2-2 Worksheet (Development of Potentially 
Effective Scheduled Maintenance Requirements) 


Upon completion of the FEMA analysis for each MSI 
and SSI, MPA 2-2, Figure 14 (Ref 5:p. A-25) was used 
to recognize all potential maintenance tasks. The decision 
to accept or reject these tasks was determined in later 
maintenance plan analysis worksheets. The logic provided by 


the worksheet helps identify potential tasks that would 
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FAILURE MODES AND EFFECTS ANALYSIS 
MPA 2.1 sheet. ! of 2 


UEM NUMENCLATUHE NO ON ENG. AC WUC 


ARRESTING HOOK SUPPORT 2 TB 


E 
PART NIJ'ABEMH uPPLICATION PREPARED BY DATE REV NO REV DATE 
Lett Hand 1200302 101 J. E. Ervin 
Right Hand 1200302 102 S 3A Arucratt NALC, Code 4120 | Feh 1978 


IC F4 DESIGN DESCRIPTION FUNCTION'S) A titammum lorging (6AL-6V-2SN)annealed comprised of a lug for arresting hook attachment, 
a tlange tor attaching and transnutting loads to the 578 bulkhead (BHD) and a heam channel acting as the lower cap lor the 

keelson. The BHD and attaching fasteners are HLT 318 and the skin fasteners are AD rivets. Lelt hand ant right hand installations 
are symmetric about aırcralt centerline. The functions are (T)resists bending loads applien to keelson,(2) transmits arresting loads to 


HEDUNOANCIES PROTECTIVE WARNING DEVICES FAIL SAFE SYSTEMS 
NONE 


FAILURE MODES FAILURE EFFECTS 


1. Loss of normal arresting capability 1. Inahility tor arrested landing. Ouring carrier operations 
(a) Lug Fracture. this would result in orobable loss of aurcratt. 


Loss of resistance by lower cap to lateral loads applied 2. Skin warp and BHO deformation. Aircraft could be 
to keelson salely recovered after flight. 
(a) Web Fracture 


Loss of lower skin/BHD Attachment . Loss of structural stability and/or continuity. Possible 
(a) Fastener Fracture. loss of arrestinq capability. Durinq carrier operations 
this would result in probable loss of aircraft. 





Figure 13. MPA 2-1 Worksheet 
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FAILURE MODES AND EFFECTS ANALYSIS 
MPA 2 1 sheet η of 2 


ITEM NOMENCLATURE NO UN ENG.AC ZONE PREPARING ACTIVITY WUC 
ARRESTING HOOK SUPPORT ac : 2209| NALC 412D 

PART NUMBER APPLICATION PREPARED BY DATE REV NO REV DATE 
Lete Hand 1200302 101 J E€. Ervin 

Right Hand 1200302 102 S 3A Aircraft NALC. Code 412D 1 Feb 1978 


ITES GE SIGN DESCRIPTION FUNCTIONS 
578 BHD and keelson, (3) provides pivot for arresting gear and (4) provides keelson attach to skin and BHD. 





KEQUNDANCIES PROTECTIVE WARNING DEVICES FAIL SAFE SYSTEMS 


FAILURE MODES FAILURE EFFECTS 





Figure 13. MPA 2-1 Worsheet (Continued) 
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DEVELOPMENT OF POTENTIALLY EFFECTIVE SCHEDULED MAINTENANCE REQUIREMENTS 


MPA 2.2 sheet 1 of 1! 
IT EG CGONERGCLATURE PART NUMBER APPLICATION 


Left Hand 1200302 101 
ARRESTING HOOK SUPPORT Right Hand 1200302.102| S-3A 


DETECTABLE BY FLIGHT 


CHEN MONITORING ° 
al. No 
a2 No 
a3. No 


IS. IMPENUING FAILURE It YES GIVF FAILURE MODE AND LIST ALL POTENTIAL TASKS THAT WOULD 

DE TFCTAHLE BY Of? AiíRCRAFT OF FECT IMPENDING FAILURE ‘CHECK INSPECT SERVICE ETC.) 

MAINTENANCE ORK UIF TEST? 

mv bla. Penetrant inspection for cracks in lug fillet area. 

es bib. Visual inspection lor corrosion, pay particular attention to lug area. 

b2 Yes 

hà. Y bic. Measure lug bushing inside diameter for wear. 

: es h2. Intensive visual for cracks in web area, pay particular attention to fillet radius. 
bJ. Visual inspection for fastener condition. 


DOES FAILURE MOLE HAVE A IE YES Give FAILURE MODE AND LIST ALL POTENTIAL TASKS REFERRING TO 
DIRECT ADVERSE FFFECT ON OPFHATING SAFETY (TOTAL TIME LIMITS CHECK, INSPECT EITC) 
OPERATING SAFETY? 


cla. Penetrant inspection for cracks in lug fillet area. 

cib. Visual inspection for corrosion, pay particular attention to lug area. 
clc. Measure lug bushing inside diameter for wear. 

c3. Visual inspection for fastener condition. 


cl. Yes 
c2. No 
cJ. Yes 


IS PRE FUNCTION HIDDEN FROM THE VIEWPOINT OF ο IS THERE AN ADVERSE RELATIONSHIP BETWEEN AGE 


THF FLIGHI CREW?’ AND RELIABILITY? Yes. based on contractor dynamic testing 

f 

AND?) No d3 No då. No or operationally inducted wear of pivot point with and without 
lubrication 

ΙΕ ΥΕ LIST ει PIPEESLILAL TASKS REFERRING TO IF YES POTENTIAL FOR OC OR HT MAINTENANCE TASK 

HIDDEN FUNCTION ‘CHECK INSPECT €TC, 


el. Periodic lubrication of pivot point. 





Figure 14. MPA 2-2 Worksheet 
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detect impending failure. Consideration was also given to 
the method of failure detection and if the failure had a 
direct adverse effect on operational safety. 


5. MPA 2-3 Worksheet (Definition of Scheduled Maintenance 
Requirements Which Must be Performed) 


Figure 15 (Ref 5: pp.A-26,27) was used to specify 
those maintenance requirements that were essential in 
promoting operational safety and reducing the possibility of 
hidden functional failures. Failures that were identified 
on the MPA 2-2 worksheet as having a direct adverse effect 
on safety were analyzed and further defined. Because a 
hidden functional failure is a failure of a component that 
is not evident to the operating crew, one of three 
alternative tasks are available: an on-condition task, a 
high-time removal, or a redesign of the item to eliminate 
the hidden characteristics. 

To complete this worksheet, contractor 
design/failure reports, safety center reports, 3M data and 
in house investigations were utilized to effectively answer 
the logic sequence. When inspection frequencies were in 
question, a threshold sampling program was considered. This 


"on- 


program was intended to recognize potential failures by 
condition" inspection of aircraft systems. By repetitive 
sampling, the program would determine the condition of the 
component and if possible, justify continued operation until 


the next sample limit. Sample sizes were determined by 
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DEFINITION OF SCHEDULED MAINTENANCE REOUIREMENTS WHICH MUST BE PERFORMED 
MPA 2-3 sheet Tot 2 





PART NUMBER APPLICATION WUC 


Left Hand 1200302 101 
Right Hand 1200302.102 


ITEM NOMENCLATURE 


















S JA Arrcratt TBE 


ARRESTING HOOK SUPPORT 
















DISPOSITION 
HELATIVE TO 
UPDATED ANALYSIS 


WHICH OF THE TASKISI REFERRING TO OPERATING SAFETY MUST BE DONE? AT LEAST 
ONE HT OR OC TASK MUST BE DONE INCLUDE RATIONALE FOR DECISION 













cla Penetrant inspection. ínr cracks in jug fillet area. Contractor fatigue testing has indicated a 
need to check for cracks in this area (reler to attached report FLH 23-14). inspect at depot at 
DLM 20% (refer to attached structural sampling table). 


Include 







cih. Visual inspection for corrosion in lug area. The lug area is easily accessible and corrosion 
on similar airceaft (refer to attached UR’s) has been a probiem. Inspect at organizational level 
every 65 days (reter to attached structural sampling tables). 


include 


















clc. Measure lug bushing inside diameter fnr wear. In instances involving like aircralt t'eler to 
attached. UR'sI, it was deterinined that worn lug bushings had contributed to jug fracture. Inspect 
at depot at DLM 20'^ (refer to attached structural sampling table). 


include 











WA DOES LOSS OF FUNCTION AFFECT CREW SURVIVABILITY EMERGENCY SYSTEMS OR ESSEN 
TIAL FLIGHT FUNCTIONS? IF YES CONTINUE WITH OUESTION I1 8. 1iF NO CONTINUE ON MPA 4 





Ouestion d generates “NO” answers for ail functions, see MPA 2 2. 


HA WHICH OF THE TASKIS) REFERRING TO HIODEN FUNCTIONIS: MUST BE DONE? AT LEAST 
ONE HI OR OC TASK MUST REF DONE INCLUOE RATIONALE FOR DECISION 


Figure 15. MPA 2-3 Worksheet 
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DEFINITION OF SCHEOULED MAINTENANCE REQUIREMENTS WHICH MUST BE PERFORMED 


MPA 23 sheet 2 οἱ 2 


LTE NOMENCLATURE PART NUMBER APPLICATION wuC 
Left Hand 1200302 101 
ARRESTING HOOK SUPPORT Right Hand 1200302.102 S.3A Aircraft TBE 





VICIS OF THE TASR S: REFERRING TO) OPERATING SAFETY MUST BE DONE? AT LEAST 


DISPOSITION 
ONE HT OR UC TASK MUST BE DONE INCLUDE RATIUNALE FOR OECISIUN 


RELATIVE TO 


HPOATEO ANALYSIS 





cJ Visual inspection for fastener condition. In six instances (five [S] on the A-7 arcraft, one [1] on 
the S 3A) visual inspections have discovered early stages of corrosion and cracks. The visual inspection 
requires very little Uume and is easily accomplished. Inspect at organizational level at every 400 flight hours. 


ια OUES LUSS OF FUNCTION AFFECT CREW SURVIVABILITY EMERGENCY SYSTEMS OR ESSEN 
TIAL FLIGHT FUNCTIUNS’ IF YES CONTINUE WITH QUESTION 118. IF NO CONTINUE ON MPA24 


16H WHILE OF THE TASKIS: REFERRING TO, HIOOE MN FUNC TIONIS!: MUST BE DONE? AT LEAST 
UNE HT OR OC TASK MUST BE DONE INCLUOE RATIONALE FOR DECISION 


Figure 15. MPA 2-3 Worksheet (Continued) 


48 


inspecting systems as they became available through routine 
service and actual system failure. Additional inspections 
were specifically tasked if supplemental information was 
required to justify maintenance task revision. It was the 
analyst's responsibility to gather data from existing 
sources in order to: (Ref 5: p. 3-51) 


a. Define the condition ofa system at a particular 
inspection; 


b. Consider granting an interval extension or require 
additional samples to be obtained based on reports of 
favorable condition at the existing inspection; 

c. Recommend design changes if the subsequent inspection 
indicates negative results. However, economic 
considerations were carefully reviewed before such a 
recommendation could occur. 

All items that were selected by the analyst as 
sampling program candidates were then anotated on the MPA 2- 
3 worksheet with supporting rational. Little guidance was 
provided as to the criteria by which sample size was 


determined or program implementation procedures. 


6. MPA 2-4 Worksheet (Definition of Scheduled Maintenance 
Requirements Which Should be Performed) 


The fifth worksheet was designed to test and 
evaluate economic Consequences of performing needed 
maintenance tasks. The purpose of Figure 16 (Ref 5: pp.A- 
28,29) was to justify, economically, if a maintenance task 
was warranted for failures that did not effect operational 


safety. 
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DEFINITION OF SCHEDULED MAINTENANCE HEOUIREMENTS WHICH SHOULD BE PERFORMED 


MPA 24 sheet. 1 of 2 


IL EM NOMENCLATOME PAHI UMBER APPLICATIDN WUC 


Lett Hand 1200302 101 





A OGES REAL AND APPLIC SHLE (A838 SHOW THE DESIRABILITY OF A SCHEDULED TASK? 
DISPOSITION 
RELATIVE IN 
UPDATED ANALYSIS 


| YES LIST TASKS FESPA DESCRIPTIONS LOGIC RATIONALE Smt! QUESTION B 
1 NO INCLIJUE HATIOINALE FOR DECISION AND GO *O QUESTION 8 


bla Yes Evaluated and accented on MPA 2 3, task cla include 
bin Yes Evaluated and accepted on MPA 23, task clb Inciude 
bic Yes Evaluated and accepted on MPA 23 task cic. Inctude 
b2 No Weh teacture is tolerable does not attect thyglit safety. The visual examintion generated Go to Question B 


by task (3 on MPA 23 1s adequate to detect web taure The task to conduct a visual 
inspection for fastener Condition 1s theretore not economically justitied. 
b3 Yes Evaiuated and accepted on MPA 2 3, task c3 





K ë DUES FAIRE O5 ITE fS CAUSE PAISSION ABORT? 


ovS EVALUATE TAs& AND INCLUDE RATIONALE FOR DECISION : 
fF NO OMIT 


b2. Yes Even tnouugh web fracture does not affect ftight satety the failure may result in skin 
warp and BHO defnensation If this condition were discovered prior to flight, it would 
possibly result in a mission sbort However since task cJ will also detect web fracture, 
this task b2 is still not economically justitied. 


Figure 16. MPA 2-4 Worksheet 
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DEFINITION OF SCHEDULED MAINTENANCE REQUIREMENTS WHICH SHOULD BE PERFORMED 


MPA 24 sheet 201 2 







PART NUMBER 


Left Hand 1200302 101 
Right Hand 1200302 102 





ITEM NOMENCLATURE APPLICATION 

















ARRESTING HOOK S 3A Aircraft 


A OOES HEAL AND APPLICABLE DATA SHOW THE DESIRABILITY OF A SCHEDULEO TASK? 
DISPOSITION 
RFLATIVE TO 

UPDATED ANALYSIS 


ΙΕ YES LIST TASKS DATA DESCHIPTIONS LOGIC RATIONALE SKIP QUESTION 8 
IF NO INCLUDE RATIONALE FOR DECISION ANO GO TO QUESTION 8 


el Yes - Data on a similar aircraft (A 7) has indicated a need to lubricate pivot point. This task 
is also justified hy contractor dynamic testing for operationally inducted wear of the 
pivot pont. (Refer to attached manutacturer'’s report +LH 235 16.) Lubricate every 30 
days at organizational level. 


B DOES FAILURE OF ITEM CAUSE MISSION ABORT? 


IF YES EVALUATE TASK ANO INCLUDE RATIONALE FOR DECISION 
IF NO OMIT 


Figure 16. MPA 2-4 Worksheet (Continued) 
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7. MPA 2-5 Worksheet (Scheduled Maintenance Requirements 
Data Sheet 


The final worksheet, Figure 17 (Ref 5:p.A-32) 
provided the data for each scheduled maintenance action that 
was determined to be necessary and cost beneficial. Each 
maintenance action was then categorized into particular 
areas or zones that would benefit the inspection process. 
By dividing the aircraft into inspection zones, the most 
efficient schedule was implemented to coordinate all 
maintenance actions that pertained to that particular zone. 
The analyst, along with engineering experts, determined the 
following by zones : (Ref 5: p.3-53) 

a. Phase cycle structure and phase intervals; 

b. Depot Level Maintenance (DLM) intervals; 

cC. Which on-condition and high time requirements could be 

| grouped into either the phase inspection package or 
the DLM inspection process. 

These final requirements became part of the overall 
maintenance plan and were incorporated into Part III of 
NAVAIRINST 4790.4 (Ref 14). A sample of the maintenance 
requirements are provided in Figure 18 (Ref 5: pp.A-39,31). 
Note that each requirement number corresponded directly to 
a specific maintenance requirement that was generated by the 
AMP analysis. 

Part III of the Maintenance Plan and the MPA 2-5 
worksheet provided the information necessary for the 
development of the organizational, intermediate and depot 
level maintenance publications. 
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SCHEDULEO MAINTENANCE REQUIREMENTS DATA SHEET 
MPA25sheet 1 οἱ 1. 


HtMENCLATURE DESIGNATION PREPARED BY DATE APPLICATION WUC 


J. E. Ervin, 
ARRESTING HOOK SUPPORT Code 4120 1 Feb 78 S.3A T 


BE 
PREPAR REVISION REVISION DATE 
PART NUMBER Left Hand 1200302 101 ΤΝ ὖ 
Right Hand 1200302-102 NALC 4120 


PWR & AIR REQUIREMENTS 
C 
F 


CONSUMABLES 


REQMI τα5ν ACCESS 
: zone {TAS REQUIRE CAUTIONS REPLACEMENT 


MENTS CONDITIONED RE OUIRE. 


ANO 





NOTES 





NO Remove Y ESI NO 
arresung 
gear 
YES NOI NOJlAlert personnel be. 
fore lowering hook. 
NO Remove YESI| NO 
arresting 
gear 
NO Remove NO|NO 
panels 
6212.1, 
-2 and 
6223-1 
YES Power NO| NO lAlert personnel be- | MIL-G 23827 
hook fore lowering hook.| Grease 


Figure 17. MPA 2-5 Worksheet 
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MAINTENANCE PLAN 
PART IIl - MAINTENANCE REQUIREMENTS 


NOMENC.i AlURE DESIGNATION PREPAHLU BY APPLICATION 


J. E. Ervin 
ARRESTING HOOK SUPPORT Code 4120 1 Feb 1978| S3A 


PART NUMBER PREPARING ACTIVITY REVISION HE VISION DATE 


Left Hand 1200302 101 
Right Hand 1200302 102 NALC 412D 


MAI 
REQUIREMENT NO REQUIREMENT or INTERVAL GHOUND SUPPORT EOUIPMENT REQUIRED 


1. (bla, c1al Penetrant luq bllet DLM Dye penetrant kit 
area for cracks {20% Sample) 
(08.03) 


2 (bib, clb) Visual inspection flor |} ORGANIZA- DS (56 day) Flashlight & 10 x glass 
evidence of corrosion 
TI A 
(08 03] ONE 


3. (blc, clc) Meusure lug bushing DEPOT DLM Hole Gauge 
inside ciameter for (20% Sample) 
wear (08 03) 


APPROVED BY DATE 


L.R Cunningham 10 February 1978 


NAVAIR (Code 4114C3) 





Figure 18. Maintenance Plan Worksheet 
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D. ANALYTICAL MAINTENANCE PROGRAM SUSTAINING PHASE 
The brcosc of the analytical maintenance sustaining 

phase was to review and update established maintenance 
requirements to ensure maximum operational availability and 
economic efficiency. The sustaining phase commenced after 
the maintenance requirements were initially developed and 
continued until the aircraft was retired from service. The 
intent of this phase was to refine and continually review 
maintenance tasks that were initially developed without 
sufficient statistical or failure information. Without some 
form of review of these borderline maintenance tasks, an 
efficient maintenance program could not exist. Although no 
particular program was detailed by the AMP, a general 
outline of the process was included. It divided the 
sustaining phase into three major areas: 

a. Monitoring 

b. Evaluation 

c. Update 

Monitoring consisted of first gathering data from all 

available resources such as 3M data, sampling prograns, 
safety center reports, and contractors and engineering 
investigations. The next step was to determine what of this 
data was the most applicable and would provide meaningful 
input into the evaluation process. Once the screened data 
indicated a possible candidate for further re-evaluation, 
tracking of the item through various methods provided the 


basis for the evaluation phase. 
D 


The evaluation process analyzed the specific problem and 
ident e the major causes. The analyst then decided on 
whether or not analytical maintenance program logic should 
be applied and what type of corrective action could rectify 
this situation. Again, the economic aspects were considered 
in deciding if the corrective action should be implemented. 
After determining which actions were justified, newly 
generated AMP analysis worksheets were originated. 

The updating process consisted of implementing those 
corrective actions that were the result of the evaluation 
process. If changes were required to the scheduled 
maintenance program, close liaison with cognizant field 
authorities (CFA), supply centers, training facilities and 


Naval Air Systems Command was required to ensure the 


changes were implemented in a timely manner. 


E. MAJOR DEFICIENCIES IN MSG 2 PHILOSOPHY 

Although MSG-2 provided a logical process for analyzing 
a particular item in terms of its Significance to an 
overall system, many areas in the analysis process lacked 
specific guidance. Since the S-3's maintenance plan was 
developed under the MSG-2 philosophy, it is important to 
note these weaknesses that MSG-3 improved. 

a. The significant item selection process was not well 


defined and could possibly allow identification of an 
item that had no significance to the system. 
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b. Once the failure mode and effects analysis determined 
each- functional failure, no logic was provided to 
relate the failure with the task that was most 
applicable in ensuring that the failure did not occur. 

C. There was no program available to evaluate maintenance 
tasks that were established with insufficient data. It 
was left up to the analyst to establish procedures that 
would enable the task to be re-evaluated using 
subsequent historical data. 

Many areas of the S-3A's maintenance plan would benefit 
from performing a thorough RCM analysis. However, the cost 
of such an enormous undertaking would be hard to justify 
considering the aircraft's age and current economic funding 
constraints. The alternative should be a partial analysis 
that would incorporate existing NARF programs with the 
current philosophies of Reliability Centered Maintenance. 
Two areas that would benefit the most from RCM are SSI re- 
evaluation and problem items that have exhibited a higher 
than normal failure rate. The next chapter will discuss the 
deficiencies of MSG-2 in detail and how RCM can provide 


added emphasis to the existing S-3A Analytical Maintenance 


Program. 


57 


IV. IMPROVEMENTS FOR THE S-3A MAINTENANCE PROGRAM 


A. RELIABILITY CENTERED MAINTENANCE 

Reliability  Centered Maintenance is the refined product 
of MSG-2 and provides detailed methodology in determining 
scheduled maintenance requirements, inspection interval 
determination, and age exploration candidates. The logic 
and analytical techniques furnished by RCM philosophy, 
enable the analyst to formulate consistent and well defined 
results. As stated previously, RCM is designed to provide a 
disciplined logic or methodology for identifying preventive 
maintenance tasks that will realize the inherent reliability 
of equipment at least expenditure of resources. To 
accomplish this goal, specific maintenance tasks are 
identified for each functional failure and, through an 
effective age exploration program, operational data is 
gathered to insure that a safe and reliable maintenance 
program is developed. 

As stated in the preceding chapter, one of the programs 
that would benefit the most from integrating RCM analytical 
techniques is in examining structurally significant items. 
NARF Alameda is currently examining its structurally 
Significant items for the S-3A utilizing a program developed 
under the Naval Air System Command's Analytical Maintenance 


Program (AMP). Called the Structural Sampling Program 


58 


(SSP), it incorporates MSG-2 philosophy and its purpose is 
to P ento the minimum number of examinations necessary to 
assess a change in the material condition of a structurally 
significant item. It has as its basis some of the same 
analytical design characteristics that were eventually 
contained in the Age Exploration Program. The data 
generated by the SSP is intended to monitor changes in the 
material condition of the SSI, update the maintenance plan, 
and identify SSI's that need further analysis (Ref 15:p. 
ID, Although the SSP has the potential to become an 
integral part of the overall maintenance effort, many areas 
of this program could benefit from incorporating RCM 
philosophy and refined age exploration techniques. 

Items not classified as SSI's but are exhibiting an 
excessive failure rate would also benefit from RCM analysis. 
These items need a thorough investigation to identify the 
proper maintenance tasks for reducing the failure rate. 

The areas that will be discussed will emphasize how RCM 
can benefit the existing SDLM programs of the S-3A. They 
include: 

a. Significant Item Selection and Tracking Methodology, 


b. Failure Mode and Effects Analysis and Maintenance Task 
Selection and Determination, 


C. Age Exploration Program. 
MIL-STD-2173 (AS) (Ref 7) provides procedures and 


techniques for applying RCM logic to Naval aircraft, weapon 
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systems and support equipment. New revised worksheets have 
been —— that analyze each maintenace task category 
for applicability and effectiveness. Because each worksheet 
is discussed in great detail in MIL-STD-2173, it will not be 
individually analyzed here. Only the particular elements 
that MSG-3 clarified and re-defined will be discussed to 
demonstrate the importance of applying the logic to the S-3A 


Structural Sampling Program and problem item analysis. 


B. SIGNIFICANT ITEM SELECTION AND TRACKING METHODOLOGY 

The significant item selection process was discussed in 
detail in Chapters II and III. It is important to note that 
no decision logic was provided in MSG-2 to assist the 
analyst in determining if the item should be classified as 
structurally significant, functionally significant or 
categorized as non-significant. Since the SSP was developed 
utilizing MSG-2 logic, it is possible that elements could be 
classified incorrectly or worse, not classified at all. 

Since the SSI's that the Structural Sampling Program 
examined were not identified using the logic provided by 
RCM, it is important that each SSI that the Structural 
Sampling Program looks at be verified as being truly 
significant to the system. If not, a great deal of wasted 
resources will be expended on a task that is not really 


necessary. 
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The SSP is designed to sample, on a continuing basis, 
each SSI. A thorough cross section of statistical data is 
derived by utilizing a matrix provided by SSP that 
determines sample size and inspection frequencies. The 
analytical process of determining sample size and inspection 
frequency is similar to that detailed in the Age Exploration 
Program. To determine which SSI is to be looked at, the SSP 
matrix first identifies the aircraft by bureau number 
(BUNO), determines which standard depot level maintenance 
(SDLM) visit the aircraft is scheduled for and finally which 
work package must be performed. Each work package contains 
certain SSI's that must be looked at and requires the 
results to be annotated on the SSI worksheet Figure 19 (Ref 
l5). These worksheets are then gathered by the analyst for 
further evaluation. However, no method has been derived to 
track or analyze the data collected for each SSI. To assist 
the analyst in this endeavor, a work sheet, Figure 29, is 
provided that will consolidate information pertaining to 
each SSI. 

By tracking each SSI separately, trends can be readily 
identified and appropriate RCM analysis can be initiated. 
Not only failure data needs to be collected, SSI's with no 
failures also need to be tracked. Part I of the worksheet 


can be used to effectively track SSI data. 
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Not all SSI failures will be detected during the 
scheduled | SDLM inspection. Failures that occur 
operationally will be annotated in Part II of the worksheet. 
This will provide a ready reference as to which aircraft 
experienced the failure, who initiated the report, the date 
of the report and the exact nature of the failure. This 
format can be used to track such reports as Engineering 
Investigations (EI), safety reports and other maintenance 
related messages. The analyst can also adopt this worksheet 
to track items that are not identified as significant items 
but are experiencing an excessive failure rate. 

This tracking of SSP and problem item data is extremely 
important for the preventive maintenance program to be 
effective. Once the significant items are identified and 
trends develop that indicate a problem, RCM can provide an 
effective means by which to analyze the component. A full 
scale RCM analysis can be performed to verify if the task is 
warranted, identify if an inspection interval adjustment is 
required, or further data is required for a decision and age 
exploration is warranted. The important point is, however, 
that the analyst must first be able to identify which items 
require further analysis. The data that is currently being 
collected for the SSP program is not broken down by specific 
SS. Rather, it has been categorized by which aircraft the 


SSI failure occurred on. By tracking each SSI and problem 
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item separately, these items will be identified and the 


analyst will have a documented trail from which to base his 
RCM analysis. 


SSI TRACKING WORKSHEET 


SSI LINE NUMBER | ITEM NOMENCLATURE | WUC | PART NUMBER 
| 


| 
— — | ed 
PERCENT OF AIRCRAFT SAMPLED 


PART I - FAILURES IDENTIFIED THROUGH NORMAL SDLM VISIT 


A/C BUNO | DATE SDLM | TYPE OF FAILURE | NOTES 
| I (IF NONE, SPECIFY) | 
| | — T MM 
| | | 
| | | 
| | 


T4 
Ze 
3. 


PART II - FAILURES IDENTIFIED THROUGH OTHER SOURCES 


A/C BUNO | DATE | SOURCE OF INFO| ORIGINATOR [TYPE OF FAILURE 
| | | (MESSAGE DTG) | 
ce o | ee 
l. | | | | 
2. | | | | 
3. | | | | 


Figure 20. Tracking Analysis Worksheet 


C. FAILURE MODES AND EFFECTS ANALYSIS AND MAINTENANCE TASK 
SELECTION AND DETERMINATION 


Failure Modes and Effects Analysis (FMEA), under MSG-2 
guidelines, was intended to isolate each legitimate 
functional failure mode and in turn, identify the related 


causes. Once these failure modes and effects were 
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determined, a maintenance category was selected by the 
analyst cuc engineer that was most appropriate. However, no 
clear logical process was provided utilizing MSG-2 
guidelines. 

MIL-STD-2173 (Ref 7) and MIL-STD-1629(A) (Ref 19) 
provide clarification and guidance in performing a thorough 
FMEA and task evaluation. The FMEA analysis identifies the: 

a. Equipment Item, 

b. Item's functions, 

C. Item's functional failures, 

d. Engineering failure modes, and 

e. Effects of the failures on the system. 

Problem items and SSI's that are identified through the 
SSP program would require a thorough Failure Modes and 
Effects Analysis (FMEA) as part of the RCM evaluation. 
Preventive maintenance analysis is then used to determine if 
there is some maintenance task which will reduce or prevent 
the failures identified from the FMEA. In the past, it was 
a judgemental call by the analyst as to which maintenance 
category was the most appropriate. 

For problem items not defined as an SSI, RCM decision 
logic details the process to determine the consequences of 
failure for each failure mode and, depending on the 
consequence of failure, identifies a particular maintenance 
task that would best avoid the failure mode. Instead of 


three maintenance task categories that were originally 
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identified by MSG-2, RCM identified five separate 
ak e They were defined in Chapter II and are as 
follows: 

a. Servicing lubrication 

b. On-condition 

c. Hard-time 

d. Combination 

e. Failure finding 

For SSI's that have experienced a well defined trend, 

either excessive failures or minimal failures, a FMEA is 
performed as part of the RCM re-evaluation process. The 
logic will then identify the SSI as either damage tolerant 
Or safe life. Once determined, the decision logic 
recommends one of the following alternatives: 

a. What task is most applicable; 

b. Possible age exploration candidate; 

Cc. Redesign; 


d. Reconsider if the item is actually a structurally 
significant item. 


After each task is determined, it must be evaluated for 
applicability and effectiveness. MSG-2 discussed the 
importance of determining if the task was both applicable 
and effective, but failed to establish a methodology that 
would provide acceptable probability of failure levels and 


cost effectiveness constraints. 
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RCM logic provides a methodology for determining the 
ED divcness of a maintenance task. This logic is 
beneficial in determining if a maintenance task that has 
been developed for a problem item or SSI is an effective 
deterent in preventing the items failure. Without 
performing this analysis, a task could be ineffective as 
well as uneconomical to perform. The failure consequence 
determines what type of analysis is applied to the task. 
Effectiveness criteria is established for safety and safety 
hidden failure consequences and seperate criterion is 
developed for economic/operational and non-safety hidden 
failure consequences. 

The RCM decision logic that is provided offers the 
analyst a clear path from which to base critical decisions 
that will eventually determine if the task is justified or 
not. By applying this logic to the Structural Sampling 
Program and items identified as problem candidates, the 
analyst can determine the appropriate course of action that 
had previosly been undefined. 

D. VERIFICATION OF MAINTENANCE TASKS THROUGH AGE 

EXPLORATION 

In MSG-2, the sustaining phase of the Analytical 
Maintenance Program (AMP) was designed to provide 
monitoring, evaluation and updates of assigned maintenance 
tasks. It recommended using data gathered from such sources 


as 3M, safety center reports, and contractor's engineering 
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investigations. However, it failed to provide any specific 
procedure — analyzing the data. It also failed to detail 
steps for establishing an effective evaluation program. 
This is exactly the situation that NARF Alameda finds its 
SSP program in. Although data is being gathered on 95515 
and other problem items, they have not established any real 
program that analyzes the data. 

By integrating RCM and the Age Exploration Program with 
current NARF analytical programs, the maintenance program 
can be continually reviewed and updated by gathering data 
throughout the system's life cycle. The data gathered from 
an effective age exploration analysis will either verify the 
validity of an existing maintenance task, identify the need 
for interval inspection adjustment or determine that 
additional age exploration analysis iS warranted. The 
methodology provided by the Age Exploration Program would be 
most beneficial in filling the current void in the 
Structural Sampling Program and problem item analysis. 

The Naval Aviation Logistics Center has recently 
developed a management manual (Ref 11) that details the 
requirements for establishing a successful Age Exploration 
Program in accordance with MIL-STD-2173 (AS) (Ref 7). The 
methodology provides specific guidance for sample size 
determination, sampling interval development and suggests 


techniques to be used for analyzing data collected. 
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Chapter II stated that all items that use default logic 
in task ey anion are an age exploration candidate. Other 
items can also be candidates for age exploration. The Age 
Exploration Program, (Ref ll:p.26) identifies these as: 

a. Items that have been identified as exhibiting poor 
reliability, high maintenance costs, low availability 
rates or high abort rates. 

b. New items that have been added as a result of 
modifications or engineering change proposals. 
However, before an age exploration task is identified, 
the item must first undergo RCM analysis. 

c. Items that cause a significant safety hazard. 

It is quite clear that this program would be well suited 
to fill the void that is hindering the re-evaluation efforts 
of maintenance task analysis. By defining such an age 
exploration task and monitoring the failure data, specific 
Knowledge is obtained that will substantiate the need for 
maintenance program adjustment. 

Although it would be extremely beneficial to perform an 
age exploration analysis on every potential candidate, the 
economical consequences must be carefully considered. 
Figure 21 (Ref 11: p.30) illustrates the decision process 
in determining if an age exploration task is warranted. Tt 
also aids in prioritizing the proposed candidates. By 
following the logic, the candidates that are safety critical 


and most cost effective are analyzed first. Lower priority 


Candidates are analyzed only if time and money permit. 
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AE 
Candidate 


l. Can a task be per- 
formed to collect, 
information from 


existing PM information 


systems at no additional 
cost? 

















4. Is an AE requirement 
mandatory, i.e. it has 
safety concerns or has 
HIGH cost saving  bene- 
fits ? 

YES 


task to 
using 


Establish AE 
collect data 


additional logistics 
resources. 
(Highest Priority) 





Figure 21. 





Collect data from 
existing information systems 
(Priority Status) 













2. Can an AE task 3. Do benefits from Establish AE task 
be developed which AE outweigh time frame/YES| to collect required 
does NOT require and effort necessary data. NO extra 
extra logistics to obtain the required resources, only time. 
resources ? data 7 (Priority Status) 





AE requirement is the 
lowest priority, only 
accomplished after 
higher oriorities are 
satisfied. 


Age Exploration Candidate Task Analysis 
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After it is determined which candidates would benefit 
the most τοι an age exploration analysis, a preliminary 
task for each candidate must be developed. The task that 
will be developed must be able to determine specific age 
relationships by providing an analytical process by which to 
monitor failure data. In most cases, age exploration is 
directed at the failure modes of the components and not at 
the overall system. The analyst, when designing the task, 
must determine what information is required, how it is going 
to be obtained, where it can be obtained, who is going to 
obtain it, and what techniques are to be used to analyze the 
data (Ref ll:p. 34). 

The final output of the age exploration process is to 
apply the results of the analysis to the preventive 
maintenance program. This involves inputing this 
information back into the RCM worksheets to determine the 
most appropriate maintenance task and inspection interval. 
RCM, by utilizing the outputs of age exploration, is able to 
adjust maintenance intervals, adjust maintenance tasks, or 


modify the design. 


E. SUMMARY 

Although the basis of the Structural Sampling Program is 
somewhat related to the Age Exploration Program, the SSP 
fails to incorporate the required methodology that would 


enable the analyst to realize the full potential of the 


pon 


AE program. It must be realized that RCM in conjunction with 
Age χρω... can play a major role in ensuring that an 
effective preventive maintenance program is established for 
SSI's as well as problem items. By not applying some form 
of re-evaluation process, all the program produces is data. 
By evaluating each maintenance task and applying the logic 
of RCM, an effective maintenance concept is achieved that 
can be adjusted as data is gathered through out the life 


cycle of the@atrerare. 
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V. SUMMARY, CONCLUSIONS AND RECOMMENDATIONS 


A. SUMMARY AND CONCLUSIONS 

The intent of this thesis was to demonstrate how 
Reliability  Centered Maintenance could enhance and provide 
further direction to the existing preventive maintenance 
program of the S-3A aircraft. It described in detail the 
Analytical Maintenance Program that was the basis for the 
current S-3A's maintenance plan. By examining how the 
maintenance plan was derived, deficiencies were identified 
in task development and re-evaluation. Removal of these 
deficiences by the use of RCM allows the analyst to 
concentrate on preventive maintenance tasks that will 
increase the inherent reliability of the equipment with the 
least expediture of resources. 

Significant item selection was not well def ined 
utilizing MSG-2 philosophy. RCM clarifies significant item 
selection and, if the logic does not provide a definitive 
answer, default logic is provided to assist the analyst in 
SSI selection decisions. All components that are subject to 
default logic became age exploration candidates. Age 
exploration verifies, through data collection and analysis, 
if the maintenance task for the SSI are valid or require 


inspection interval adjustment. 
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Failure Modes and Effects Analysis provides a clear path 
in analyzing each functional failure and determining which 
preventive maintenance task would reduce or prevent the 
identified failure. Dependent on the failure consequence, 
RCM recommends one of five maintenance tasks categories. 
After each functional failure has an assigned maintenance 
task, the task can be evaluated for applicability and 
effectiveness. Economic as well as safety considerations 
can be assessed to determine the necessity of establishing a 
required maintenance task. 

Age Exploration is one of the most important elements of 
the RCM program. By establishing an effective age 
exploration program, the maintenance program is continually 
reviewed by gathering historical data throughout the life 
cycle of the aircraft. Specific knowledge is then obtained 
that will indicate if a maintenance task adjustment is 


warranted. 


B. RECOMMENDATIONS 

The Naval Air Rework Facility at NAS Alameda could 
benefit substantially by incorporating RCM analysis into 
existing S-3A preventive maintenance programs. However, 
performing a thorough RCM analysis on every S-3A component 
and program can not be justified. It is therefore 
recommended that RCM be applied selectively to those 


components and programs that would benefit the most. 
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The Structural Sampling Program and components that are 
experiencing excessive failures are two aspects of the 
maintenance analysis effort that would profit from 
incorporating RCM analysis. NARF Alameda is currently 
sampling every structrually significant item through the 
Structural Sampling Program, but has not established a 
program by which to analyze the data. Likewise, problem 
items that are identified "in-house" or through operational 
channels have not undergone RCM analysis. Thus, the 
following recommendations are provided: 

1. SSP must identify through SSI data collection 
techniques those items that are experiencing a trend. 
Both excessive failures and minimal failures must be 


identified. 


2. Problem items that are not SSI's, but are experiencing 
excessive failures also need to be tracked. 


3. Once a trend is identified by the analyst, RCM 
techniques must be applied to develop a task that will 
rectify the problem. Possible consequences will include 
re-defining the task involved, task interval adjustment, 
or performing further anlaysis through age exploration. 

It is most important, that the analyst realize the 
benefits that RCM can provide. Reliability Centered 
Maintenance clarifies and broadens the scope of maintenance 


task analysis and will add significant improvements’ to 


existing SDLM Analytical Maintenance Programs. 
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